Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: jot6CWJx0AJekOXg4u1EvUraUIdZpGEO67+EyTOucgk=
Subject key identifier: AC:8D:60:D8:F3:92:BC:C7:01:5F:21:C8:81:B6:2B:CD:37:9C:15:2D
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 019D28BB7DF9B69CE4F52BE3B691B16DA56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 0821
Signing time: Thu 26 Mar 2026 06:01:09 +0000
Manifest this update: Thu 26 Mar 2026 06:01:09 +0000
Manifest next update: Fri 27 Mar 2026 06:01:09 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: pw0r3gU6S+q7j4wE7B4Wydaj8mPpCIDTBU5Ap6IAlVo=)
2: bOWNnQQVbM5f-UYg-QV5mDSs02I.roa (hash: ZHzPwAfR/0qTdqa3UIdlS72kIIMUcV3Y09FsBOM1tW0=)
3: c3mRC2zskUzL_6AdndC0KZP1S14.roa (hash: BCkPN8vUy3sfeplOO5KxZSim29zaECBgi+38mZOABLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:7d:f9:b6:9c:e4:f5:2b:e3:b6:91:b1:6d:a5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Mar 26 06:01:09 2026 GMT
Not After : Mar 27 06:01:09 2026 GMT
Subject: CN=ac8d60d8f392bcc7015f21c881b62bcd379c152d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:4e:bd:2f:f8:8d:e5:01:fa:d9:6f:61:22:
49:c3:d1:05:1f:08:db:e5:1f:a3:ac:98:99:ac:89:
1d:1f:85:5f:27:9e:b7:ad:87:a8:e9:51:41:d3:58:
86:e3:96:5d:e0:ac:e0:4d:6d:9d:c9:60:93:91:14:
e4:ac:76:5b:55:4f:ac:c0:08:18:0a:81:37:77:fd:
be:2a:0f:f3:e8:56:ca:ff:1d:fb:b4:20:71:15:14:
c4:4e:d0:53:99:a1:79:7d:fb:62:f7:6a:0d:20:f2:
e5:79:33:fb:fb:3c:ed:20:6b:4c:ba:a1:56:64:7e:
c8:1c:ae:fa:88:87:17:4c:93:a1:86:1a:7a:22:6a:
56:63:2c:03:11:36:6e:8f:1c:48:de:3b:ae:ad:72:
12:c4:5f:21:96:43:b0:c4:d6:2e:a3:2b:a7:fa:73:
eb:5e:90:c5:5d:c0:90:f2:bd:fe:4f:80:c7:18:96:
57:18:0c:6c:5c:7d:64:8b:da:50:f3:fa:d2:80:59:
40:96:cc:c6:50:a1:ac:20:6b:c6:e5:31:33:4e:12:
3f:f1:d6:20:3e:fc:be:a0:da:0f:9f:16:12:22:e4:
0d:63:91:16:05:89:bd:ab:25:e6:a2:15:eb:d5:83:
ac:8a:cd:4d:e8:8b:9f:95:58:b3:c5:5f:8f:56:30:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8D:60:D8:F3:92:BC:C7:01:5F:21:C8:81:B6:2B:CD:37:9C:15:2D
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:08:f2:78:d8:60:8e:42:be:03:1d:b8:c7:9a:d4:2c:d9:12:
1b:ca:3f:57:71:60:5b:4c:34:22:6e:fd:28:a6:a2:4d:e3:a3:
3b:d9:5f:51:54:7d:32:6d:cd:08:2f:ee:95:41:2d:ec:4c:f2:
40:dc:07:25:87:1a:1d:17:d7:65:74:52:4a:f7:5a:7b:19:3f:
70:77:4e:21:2c:95:4a:5a:d4:60:e0:23:de:06:f8:e5:50:4b:
8b:f4:5a:00:5b:0d:e6:19:9f:0c:a6:9d:2d:89:7d:df:59:a4:
28:19:ad:e2:70:9c:38:3a:e9:64:0b:a6:75:d9:e8:06:3f:e1:
29:5b:e1:60:d7:cd:11:79:64:06:2b:af:a7:ad:c7:4e:f1:01:
1d:10:c9:eb:24:58:c8:78:c3:8c:f6:6e:e3:60:b5:46:76:27:
32:0d:17:92:e4:e0:cf:f7:92:ea:29:54:03:14:c6:3d:75:fe:
a3:7d:46:a3:2e:a8:65:72:6e:17:37:d5:bf:38:9c:3d:81:76:
c3:6c:66:8b:4e:8f:3b:30:55:9d:77:1d:fc:6c:9e:56:f0:48:
0d:95:92:26:d0:50:99:f5:58:25:58:e0:5f:6b:93:2d:75:40:
fb:c7:be:93:54:f6:5f:c8:a1:99:d7:f7:ab:30:b4:23:e3:4f:
80:7b:86:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou335tpzk9SvjtpGxbaVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjYwMTZkODc4MjMwMTI4YjU4ZTI3OWQ2NjFjMTk1ZTYz
OTk1ODgwHhcNMjYwMzI2MDYwMTA5WhcNMjYwMzI3MDYwMTA5WjAzMTEwLwYDVQQD
EyhhYzhkNjBkOGYzOTJiY2M3MDE1ZjIxYzg4MWI2MmJjZDM3OWMxNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI1OvS/4jeUB+tlvYSJJw9EFHwjb
5R+jrJiZrIkdH4VfJ563rYeo6VFB01iG45Zd4KzgTW2dyWCTkRTkrHZbVU+swAgY
CoE3d/2+Kg/z6FbK/x37tCBxFRTETtBTmaF5ffti92oNIPLleTP7+zztIGtMuqFW
ZH7IHK76iIcXTJOhhhp6ImpWYywDETZujxxI3juurXISxF8hlkOwxNYuoyun+nPr
XpDFXcCQ8r3+T4DHGJZXGAxsXH1ki9pQ8/rSgFlAlszGUKGsIGvG5TEzThI/8dYg
Pvy+oNoPnxYSIuQNY5EWBYm9qyXmohXr1YOsis1N6IuflVizxV+PVjDmmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyNYNjzkrzHAV8hyIG2K803nBUtMB8GA1UdIwQY
MBaAFPVmAW2HgjASi1jiedZhwZXmOZWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdZQmJZZUNNQktMV09KNTFtSEJsZVk1bFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wOTNhNTEtMTA3NS00MGJlLTlkYzIt
ZDE1YjA3OWMzNWZiLzEvOVdZQmJZZUNNQktMV09KNTFtSEJsZVk1bFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8wOTNhNTEtMTA3NS00MGJlLTlkYzItZDE1YjA3OWMzNWZi
LzEvOVdZQmJZZUNNQktMV09KNTFtSEJsZVk1bFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQjyeNhg
jkK+Ax24x5rULNkSG8o/V3FgW0w0Im79KKaiTeOjO9lfUVR9Mm3NCC/ulUEt7Ezy
QNwHJYcaHRfXZXRSSvdaexk/cHdOISyVSlrUYOAj3gb45VBLi/RaAFsN5hmfDKad
LYl931mkKBmt4nCcODrpZAumddnoBj/hKVvhYNfNEXlkBiuvp63HTvEBHRDJ6yRY
yHjDjPZu42C1RnYnMg0XkuTgz/eS6ilUAxTGPXX+o31Goy6oZXJuFzfVvzicPYF2
w2xmi06POzBVnXcd/GyeVvBIDZWSJtBQmfVYJVjgX2uTLXVA+8e+k1T2X8ihmdf3
qzC0I+NPgHuGcQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:54 2026 by rpki-client